Malicious code in @bbkkfkk/pre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c1f8ea16f76d6d90b7428b1448704b5b42f2db84e96945cc9c85237013060e The package @bbkkfkk/pre was found to contain malicious code. Source: ghsa-malware 18fa96a25503e48ec0ab99b483a5e7c4c8acd355e03c509295d39daf6509b21a A...

MAL-2025-49356 Malicious code in aes-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22d763f4c915454a17152533dbf628f16eef45bf66f27ecf13414baa94002c The package aes-valid-ipherv was found to contain malicious code. Source: ghsa-malware 22297960d5b9fc9c09290fc460a632ff653b9b660089fa10ffff05c2efc053...

Malicious code in make-vis-flexible (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4b327a21d49613743c6cd4f96d8eeee813ad7a28252373da14202debcf4712 The package make-vis-flexible was found to contain malicious code. Source: ghsa-malware...

Malicious code in monoblast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d77da2ba877fe8f60939aa31a965bd4b4f0a4265edff812ebd8817aa008c674 The package monoblast was found to contain malicious code. Source: ghsa-malware 528645f69305646755172e18341eb5b57038d4f5f46faa93b040fc361e85fedf Any...

Malicious code in telegram-bot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6146ccba5593f3f123cbe20b94fd9df9d168c3e4614e5bf93a1fdd8e96fc7d The package telegram-bot-starter was found to contain malicious code. Source: ghsa-malware...

Malicious code in telegram-bot-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850fdb1c7d5ecd92e025e8b58e36afd28fae3e1d4127151ee4e3ee8e634d9b0c The package telegram-bot-start was found to contain malicious code. Source: ghsa-malware...

Malicious code in sai-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13c29b341c706e72066be2c2c8227189924ec9438d5e2ae7944484b2af63375 The package sai-tg-api was found to contain malicious code. Source: ghsa-malware 5a9fb1188aa41761a69996f43b3f4551ba995a153cb1ca06ee384db1331d27fc Any...

Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

MAL-2025-49245 Malicious code in tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc855ea3b9e7fe55f82bc9c967ae3e8789666f58f0a9504975e905a164c5af2 The package tailwindcss-utility was found to contain malicious code. Source: ghsa-malware...

CVE-2025-34274

Nagios Log Server (pre-2024R2.0.3) contains an execution with unnecessary privileges due to embedding a Logstash process running as root. If an attacker compromises Logstash (e.g., via insecure plugins, pipeline config injection, or input parsing vulnerabilities), they could execute code with roo...

MAL-2025-49101 Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

Malicious code in xo-third-party-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49072 Malicious code in xo-third-party-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-form-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b076aac6d8c1d695f9ed279e4948c727abd708141c9256d1ecc0faa1f14b579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49064 Malicious code in vuejs-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a06ba3db5dc9f82ea682ce485a98f9fe76e64ba482445a08306e872524603f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48981 Malicious code in airbnb-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cccaba4bd0c7417f30999db8ce705201039794a8ad09804f33dd1fdbe088a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zohocrm-nodejs-sdk-3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8667273dd1820eda9a1a67abda3359d484492251a23ee3bb7acb310721b92ed5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ais-sn-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2dae2da223bd605098cfd095d8e5adea72f0262e1c387f483fe9048a17215e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48986 Malicious code in audio-game (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3184afacb10b3ee0f3031afad01b6f80db53e1b6dac1fdd68937a0f12b9de1b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in audio-game (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3184afacb10b3ee0f3031afad01b6f80db53e1b6dac1fdd68937a0f12b9de1b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...